blob: e573077f1672e06bf159c9a242564c5436fc0a75 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
Dan Williams685784a2007-07-09 11:56:42 -07002# Generic algorithms support
3#
4config XOR_BLOCKS
5 tristate
6
7#
Dan Williams9bc89cd2007-01-02 11:10:44 -07008# async_tx api: hardware offloaded memory transfer/transform support
9#
10source "crypto/async_tx/Kconfig"
11
12#
Linus Torvalds1da177e2005-04-16 15:20:36 -070013# Cryptographic API Configuration
14#
Jan Engelhardt2e290f42007-05-18 15:11:01 +100015menuconfig CRYPTO
Sebastian Siewiorc3715cb92008-03-30 16:36:09 +080016 tristate "Cryptographic API"
Linus Torvalds1da177e2005-04-16 15:20:36 -070017 help
18 This option provides the core Cryptographic API.
19
Herbert Xucce9e062006-08-21 21:08:13 +100020if CRYPTO
21
Sebastian Siewior584fffc2008-04-05 21:04:48 +080022comment "Crypto core or helper"
23
Neil Hormanccb778e2008-08-05 14:13:08 +080024config CRYPTO_FIPS
25 bool "FIPS 200 compliance"
Neil Horman4e4ed832009-08-20 17:54:16 +100026 depends on CRYPTO_ANSI_CPRNG
Neil Hormanccb778e2008-08-05 14:13:08 +080027 help
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
Gilles Espinassef77f13e2010-03-29 15:41:47 +020031 this is. Note that CRYPTO_ANSI_CPRNG is required if this
Neil Horman4e4ed832009-08-20 17:54:16 +100032 option is selected
Neil Hormanccb778e2008-08-05 14:13:08 +080033
Herbert Xucce9e062006-08-21 21:08:13 +100034config CRYPTO_ALGAPI
35 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110036 select CRYPTO_ALGAPI2
Herbert Xucce9e062006-08-21 21:08:13 +100037 help
38 This option provides the API for cryptographic algorithms.
39
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110040config CRYPTO_ALGAPI2
41 tristate
42
Herbert Xu1ae97822007-08-30 15:36:14 +080043config CRYPTO_AEAD
44 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110045 select CRYPTO_AEAD2
Herbert Xu1ae97822007-08-30 15:36:14 +080046 select CRYPTO_ALGAPI
47
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110048config CRYPTO_AEAD2
49 tristate
50 select CRYPTO_ALGAPI2
51
Herbert Xu5cde0af2006-08-22 00:07:53 +100052config CRYPTO_BLKCIPHER
53 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110054 select CRYPTO_BLKCIPHER2
Herbert Xu5cde0af2006-08-22 00:07:53 +100055 select CRYPTO_ALGAPI
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110056
57config CRYPTO_BLKCIPHER2
58 tristate
59 select CRYPTO_ALGAPI2
60 select CRYPTO_RNG2
Huang Ying0a2e8212009-02-19 14:44:02 +080061 select CRYPTO_WORKQUEUE
Herbert Xu5cde0af2006-08-22 00:07:53 +100062
Herbert Xu055bcee2006-08-19 22:24:23 +100063config CRYPTO_HASH
64 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110065 select CRYPTO_HASH2
Herbert Xu055bcee2006-08-19 22:24:23 +100066 select CRYPTO_ALGAPI
67
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110068config CRYPTO_HASH2
69 tristate
70 select CRYPTO_ALGAPI2
71
Neil Horman17f0f4a2008-08-14 22:15:52 +100072config CRYPTO_RNG
73 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110074 select CRYPTO_RNG2
Neil Horman17f0f4a2008-08-14 22:15:52 +100075 select CRYPTO_ALGAPI
76
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110077config CRYPTO_RNG2
78 tristate
79 select CRYPTO_ALGAPI2
80
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080081config CRYPTO_PCOMP
82 tristate
Herbert Xubc94e592010-06-03 20:33:06 +100083 select CRYPTO_PCOMP2
84 select CRYPTO_ALGAPI
85
86config CRYPTO_PCOMP2
87 tristate
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080088 select CRYPTO_ALGAPI2
89
Herbert Xu2b8c19d2006-09-21 11:31:44 +100090config CRYPTO_MANAGER
91 tristate "Cryptographic algorithm manager"
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110092 select CRYPTO_MANAGER2
Herbert Xu2b8c19d2006-09-21 11:31:44 +100093 help
94 Create default cryptographic template instantiations such as
95 cbc(aes).
96
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110097config CRYPTO_MANAGER2
98 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
99 select CRYPTO_AEAD2
100 select CRYPTO_HASH2
101 select CRYPTO_BLKCIPHER2
Herbert Xubc94e592010-06-03 20:33:06 +1000102 select CRYPTO_PCOMP2
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100103
Herbert Xu326a6342010-08-06 09:40:28 +0800104config CRYPTO_MANAGER_DISABLE_TESTS
105 bool "Disable run-time self tests"
Herbert Xu00ca28a2010-08-06 10:34:00 +0800106 default y
107 depends on CRYPTO_MANAGER2
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000108 help
Herbert Xu326a6342010-08-06 09:40:28 +0800109 Disable run-time self tests that normally take place at
110 algorithm registration.
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000111
Rik Snelc494e072006-11-29 18:59:44 +1100112config CRYPTO_GF128MUL
113 tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
114 depends on EXPERIMENTAL
115 help
116 Efficient table driven implementation of multiplications in the
117 field GF(2^128). This is needed by some cypher modes. This
118 option will be selected automatically if you select such a
119 cipher mode. Only select this option by hand if you expect to load
120 an external module that requires these functions.
121
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800122config CRYPTO_NULL
123 tristate "Null algorithms"
124 select CRYPTO_ALGAPI
125 select CRYPTO_BLKCIPHER
Herbert Xud35d2452008-11-08 08:09:56 +0800126 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800127 help
128 These are 'Null' algorithms, used by IPsec, which do nothing.
129
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100130config CRYPTO_PCRYPT
131 tristate "Parallel crypto engine (EXPERIMENTAL)"
132 depends on SMP && EXPERIMENTAL
133 select PADATA
134 select CRYPTO_MANAGER
135 select CRYPTO_AEAD
136 help
137 This converts an arbitrary crypto algorithm into a parallel
138 algorithm that executes in kernel threads.
139
Huang Ying25c38d32009-02-19 14:33:40 +0800140config CRYPTO_WORKQUEUE
141 tristate
142
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800143config CRYPTO_CRYPTD
144 tristate "Software async crypto daemon"
Herbert Xudb131ef2006-09-21 11:44:08 +1000145 select CRYPTO_BLKCIPHER
Loc Hob8a28252008-05-14 21:23:00 +0800146 select CRYPTO_HASH
Herbert Xu43518402006-10-16 21:28:58 +1000147 select CRYPTO_MANAGER
Huang Ying254eff72009-02-19 14:42:19 +0800148 select CRYPTO_WORKQUEUE
Herbert Xudb131ef2006-09-21 11:44:08 +1000149 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800150 This is a generic software asynchronous crypto daemon that
151 converts an arbitrary synchronous software crypto algorithm
152 into an asynchronous algorithm that executes in a kernel thread.
153
154config CRYPTO_AUTHENC
155 tristate "Authenc support"
156 select CRYPTO_AEAD
157 select CRYPTO_BLKCIPHER
158 select CRYPTO_MANAGER
159 select CRYPTO_HASH
160 help
161 Authenc: Combined mode wrapper for IPsec.
162 This is required for IPSec.
163
164config CRYPTO_TEST
165 tristate "Testing module"
166 depends on m
Herbert Xuda7f0332008-07-31 17:08:25 +0800167 select CRYPTO_MANAGER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800168 help
169 Quick & dirty crypto test module.
170
171comment "Authenticated Encryption with Associated Data"
172
173config CRYPTO_CCM
174 tristate "CCM support"
175 select CRYPTO_CTR
176 select CRYPTO_AEAD
177 help
178 Support for Counter with CBC MAC. Required for IPsec.
179
180config CRYPTO_GCM
181 tristate "GCM/GMAC support"
182 select CRYPTO_CTR
183 select CRYPTO_AEAD
Huang Ying9382d972009-08-06 15:34:26 +1000184 select CRYPTO_GHASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800185 help
186 Support for Galois/Counter Mode (GCM) and Galois Message
187 Authentication Code (GMAC). Required for IPSec.
188
189config CRYPTO_SEQIV
190 tristate "Sequence Number IV Generator"
191 select CRYPTO_AEAD
192 select CRYPTO_BLKCIPHER
Herbert Xua0f000e2008-08-14 22:21:31 +1000193 select CRYPTO_RNG
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800194 help
195 This IV generator generates an IV based on a sequence number by
196 xoring it with a salt. This algorithm is mainly useful for CTR
197
198comment "Block modes"
Herbert Xudb131ef2006-09-21 11:44:08 +1000199
200config CRYPTO_CBC
201 tristate "CBC support"
202 select CRYPTO_BLKCIPHER
Herbert Xu43518402006-10-16 21:28:58 +1000203 select CRYPTO_MANAGER
Herbert Xudb131ef2006-09-21 11:44:08 +1000204 help
205 CBC: Cipher Block Chaining mode
206 This block cipher algorithm is required for IPSec.
207
Joy Latten23e353c2007-10-23 08:50:32 +0800208config CRYPTO_CTR
209 tristate "CTR support"
210 select CRYPTO_BLKCIPHER
Herbert Xu0a270322007-11-30 21:38:37 +1100211 select CRYPTO_SEQIV
Joy Latten23e353c2007-10-23 08:50:32 +0800212 select CRYPTO_MANAGER
Joy Latten23e353c2007-10-23 08:50:32 +0800213 help
214 CTR: Counter mode
215 This block cipher algorithm is required for IPSec.
216
Kevin Coffman76cb9522008-03-24 21:26:16 +0800217config CRYPTO_CTS
218 tristate "CTS support"
219 select CRYPTO_BLKCIPHER
220 help
221 CTS: Cipher Text Stealing
222 This is the Cipher Text Stealing mode as described by
223 Section 8 of rfc2040 and referenced by rfc3962.
224 (rfc3962 includes errata information in its Appendix A)
225 This mode is required for Kerberos gss mechanism support
226 for AES encryption.
227
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800228config CRYPTO_ECB
229 tristate "ECB support"
Herbert Xu653ebd92007-11-27 19:48:27 +0800230 select CRYPTO_BLKCIPHER
Herbert Xu124b53d2007-04-16 20:49:20 +1000231 select CRYPTO_MANAGER
232 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800233 ECB: Electronic CodeBook mode
234 This is the simplest block cipher algorithm. It simply encrypts
235 the input block by block.
Herbert Xu124b53d2007-04-16 20:49:20 +1000236
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800237config CRYPTO_LRW
238 tristate "LRW support (EXPERIMENTAL)"
239 depends on EXPERIMENTAL
David Howells90831632006-12-16 12:13:14 +1100240 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800241 select CRYPTO_MANAGER
242 select CRYPTO_GF128MUL
David Howells90831632006-12-16 12:13:14 +1100243 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800244 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
245 narrow block cipher mode for dm-crypt. Use it with cipher
246 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
247 The first 128, 192 or 256 bits in the key are used for AES and the
248 rest is used to tie each cipher block to its logical position.
David Howells90831632006-12-16 12:13:14 +1100249
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800250config CRYPTO_PCBC
251 tristate "PCBC support"
252 select CRYPTO_BLKCIPHER
253 select CRYPTO_MANAGER
254 help
255 PCBC: Propagating Cipher Block Chaining mode
256 This block cipher algorithm is required for RxRPC.
257
258config CRYPTO_XTS
259 tristate "XTS support (EXPERIMENTAL)"
260 depends on EXPERIMENTAL
261 select CRYPTO_BLKCIPHER
262 select CRYPTO_MANAGER
263 select CRYPTO_GF128MUL
264 help
265 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
266 key size 256, 384 or 512 bits. This implementation currently
267 can't handle a sectorsize which is not a multiple of 16 bytes.
268
Huang Ying150c7e82009-03-29 15:39:02 +0800269config CRYPTO_FPU
270 tristate
271 select CRYPTO_BLKCIPHER
272 select CRYPTO_MANAGER
273
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800274comment "Hash modes"
275
276config CRYPTO_HMAC
277 tristate "HMAC support"
278 select CRYPTO_HASH
279 select CRYPTO_MANAGER
280 help
281 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
282 This is required for IPSec.
283
284config CRYPTO_XCBC
285 tristate "XCBC support"
286 depends on EXPERIMENTAL
287 select CRYPTO_HASH
288 select CRYPTO_MANAGER
289 help
290 XCBC: Keyed-Hashing with encryption algorithm
291 http://www.ietf.org/rfc/rfc3566.txt
292 http://csrc.nist.gov/encryption/modes/proposedmodes/
293 xcbc-mac/xcbc-mac-spec.pdf
294
Shane Wangf1939f72009-09-02 20:05:22 +1000295config CRYPTO_VMAC
296 tristate "VMAC support"
297 depends on EXPERIMENTAL
298 select CRYPTO_HASH
299 select CRYPTO_MANAGER
300 help
301 VMAC is a message authentication algorithm designed for
302 very high speed on 64-bit architectures.
303
304 See also:
305 <http://fastcrypto.org/vmac>
306
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800307comment "Digest"
308
309config CRYPTO_CRC32C
310 tristate "CRC32c CRC algorithm"
Herbert Xu5773a3e2008-07-08 20:54:28 +0800311 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800312 help
313 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
314 by iSCSI for header and data digests and by others.
Herbert Xu69c35ef2008-11-07 15:11:47 +0800315 See Castagnoli93. Module will be crc32c.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800316
Austin Zhang8cb51ba2008-08-07 09:57:03 +0800317config CRYPTO_CRC32C_INTEL
318 tristate "CRC32c INTEL hardware acceleration"
319 depends on X86
320 select CRYPTO_HASH
321 help
322 In Intel processor with SSE4.2 supported, the processor will
323 support CRC32C implementation using hardware accelerated CRC32
324 instruction. This option will create 'crc32c-intel' module,
325 which will enable any routine to use the CRC32 instruction to
326 gain performance compared with software implementation.
327 Module will be crc32c-intel.
328
Huang Ying2cdc6892009-08-06 15:32:38 +1000329config CRYPTO_GHASH
330 tristate "GHASH digest algorithm"
331 select CRYPTO_SHASH
332 select CRYPTO_GF128MUL
333 help
334 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
335
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800336config CRYPTO_MD4
337 tristate "MD4 digest algorithm"
Adrian-Ken Rueegsegger808a1762008-12-03 19:55:27 +0800338 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700339 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800340 MD4 message digest algorithm (RFC1320).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700341
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800342config CRYPTO_MD5
343 tristate "MD5 digest algorithm"
Adrian-Ken Rueegsegger14b75ba2008-12-03 19:57:12 +0800344 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700345 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800346 MD5 message digest algorithm (RFC1321).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700347
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800348config CRYPTO_MICHAEL_MIC
349 tristate "Michael MIC keyed digest algorithm"
Adrian-Ken Rueegsegger19e2bf12008-12-07 19:35:38 +0800350 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800351 help
352 Michael MIC is used for message integrity protection in TKIP
353 (IEEE 802.11i). This algorithm is required for TKIP, but it
354 should not be used for other purposes because of the weakness
355 of the algorithm.
356
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800357config CRYPTO_RMD128
Adrian Bunkb6d44342008-07-16 19:28:00 +0800358 tristate "RIPEMD-128 digest algorithm"
Herbert Xu7c4468b2008-11-08 09:10:40 +0800359 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800360 help
361 RIPEMD-128 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800362
Adrian Bunkb6d44342008-07-16 19:28:00 +0800363 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
364 to be used as a secure replacement for RIPEMD. For other use cases
365 RIPEMD-160 should be used.
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800366
Adrian Bunkb6d44342008-07-16 19:28:00 +0800367 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
368 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800369
370config CRYPTO_RMD160
Adrian Bunkb6d44342008-07-16 19:28:00 +0800371 tristate "RIPEMD-160 digest algorithm"
Herbert Xue5835fb2008-11-08 09:18:51 +0800372 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800373 help
374 RIPEMD-160 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800375
Adrian Bunkb6d44342008-07-16 19:28:00 +0800376 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
377 to be used as a secure replacement for the 128-bit hash functions
378 MD4, MD5 and it's predecessor RIPEMD
379 (not to be confused with RIPEMD-128).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800380
Adrian Bunkb6d44342008-07-16 19:28:00 +0800381 It's speed is comparable to SHA1 and there are no known attacks
382 against RIPEMD-160.
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800383
Adrian Bunkb6d44342008-07-16 19:28:00 +0800384 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
385 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800386
387config CRYPTO_RMD256
Adrian Bunkb6d44342008-07-16 19:28:00 +0800388 tristate "RIPEMD-256 digest algorithm"
Herbert Xud8a5e2e2008-11-08 09:58:10 +0800389 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800390 help
391 RIPEMD-256 is an optional extension of RIPEMD-128 with a
392 256 bit hash. It is intended for applications that require
393 longer hash-results, without needing a larger security level
394 (than RIPEMD-128).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800395
Adrian Bunkb6d44342008-07-16 19:28:00 +0800396 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
397 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800398
399config CRYPTO_RMD320
Adrian Bunkb6d44342008-07-16 19:28:00 +0800400 tristate "RIPEMD-320 digest algorithm"
Herbert Xu3b8efb42008-11-08 10:11:09 +0800401 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800402 help
403 RIPEMD-320 is an optional extension of RIPEMD-160 with a
404 320 bit hash. It is intended for applications that require
405 longer hash-results, without needing a larger security level
406 (than RIPEMD-160).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800407
Adrian Bunkb6d44342008-07-16 19:28:00 +0800408 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
409 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800410
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800411config CRYPTO_SHA1
412 tristate "SHA1 digest algorithm"
Adrian-Ken Rueegsegger54ccb362008-12-02 21:08:20 +0800413 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800414 help
415 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
416
417config CRYPTO_SHA256
418 tristate "SHA224 and SHA256 digest algorithm"
Adrian-Ken Rueegsegger50e109b52008-12-03 19:57:49 +0800419 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800420 help
421 SHA256 secure hash standard (DFIPS 180-2).
422
423 This version of SHA implements a 256 bit hash with 128 bits of
424 security against collision attacks.
425
Adrian Bunkb6d44342008-07-16 19:28:00 +0800426 This code also includes SHA-224, a 224 bit hash with 112 bits
427 of security against collision attacks.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800428
429config CRYPTO_SHA512
430 tristate "SHA384 and SHA512 digest algorithms"
Adrian-Ken Rueegseggerbd9d20d2008-12-17 16:49:02 +1100431 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800432 help
433 SHA512 secure hash standard (DFIPS 180-2).
434
435 This version of SHA implements a 512 bit hash with 256 bits of
436 security against collision attacks.
437
438 This code also includes SHA-384, a 384 bit hash with 192 bits
439 of security against collision attacks.
440
441config CRYPTO_TGR192
442 tristate "Tiger digest algorithms"
Adrian-Ken Rueegseggerf63fbd32008-12-03 19:58:32 +0800443 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800444 help
445 Tiger hash algorithm 192, 160 and 128-bit hashes
446
447 Tiger is a hash function optimized for 64-bit processors while
448 still having decent performance on 32-bit processors.
449 Tiger was developed by Ross Anderson and Eli Biham.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700450
451 See also:
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800452 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
453
454config CRYPTO_WP512
455 tristate "Whirlpool digest algorithms"
Adrian-Ken Rueegsegger49465102008-12-07 19:34:37 +0800456 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800457 help
458 Whirlpool hash algorithm 512, 384 and 256-bit hashes
459
460 Whirlpool-512 is part of the NESSIE cryptographic primitives.
461 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
462
463 See also:
464 <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
465
Huang Ying0e1227d2009-10-19 11:53:06 +0900466config CRYPTO_GHASH_CLMUL_NI_INTEL
467 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
Huang Ying3e02e5c2009-10-27 19:07:24 +0800468 depends on (X86 || UML_X86) && 64BIT
Huang Ying0e1227d2009-10-19 11:53:06 +0900469 select CRYPTO_SHASH
470 select CRYPTO_CRYPTD
471 help
472 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
473 The implementation is accelerated by CLMUL-NI of Intel.
474
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800475comment "Ciphers"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700476
477config CRYPTO_AES
478 tristate "AES cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000479 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700480 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800481 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700482 algorithm.
483
484 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800485 both hardware and software across a wide range of computing
486 environments regardless of its use in feedback or non-feedback
487 modes. Its key setup time is excellent, and its key agility is
488 good. Rijndael's very low memory requirements make it very well
489 suited for restricted-space environments, in which it also
490 demonstrates excellent performance. Rijndael's operations are
491 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700492
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800493 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700494
495 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
496
497config CRYPTO_AES_586
498 tristate "AES cipher algorithms (i586)"
Herbert Xucce9e062006-08-21 21:08:13 +1000499 depends on (X86 || UML_X86) && !64BIT
500 select CRYPTO_ALGAPI
Sebastian Siewior5157dea2007-11-10 19:07:16 +0800501 select CRYPTO_AES
Linus Torvalds1da177e2005-04-16 15:20:36 -0700502 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800503 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700504 algorithm.
505
506 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800507 both hardware and software across a wide range of computing
508 environments regardless of its use in feedback or non-feedback
509 modes. Its key setup time is excellent, and its key agility is
510 good. Rijndael's very low memory requirements make it very well
511 suited for restricted-space environments, in which it also
512 demonstrates excellent performance. Rijndael's operations are
513 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700514
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800515 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700516
517 See <http://csrc.nist.gov/encryption/aes/> for more information.
518
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700519config CRYPTO_AES_X86_64
520 tristate "AES cipher algorithms (x86_64)"
Herbert Xucce9e062006-08-21 21:08:13 +1000521 depends on (X86 || UML_X86) && 64BIT
522 select CRYPTO_ALGAPI
Sebastian Siewior81190b32007-11-08 21:25:04 +0800523 select CRYPTO_AES
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700524 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800525 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700526 algorithm.
527
528 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800529 both hardware and software across a wide range of computing
530 environments regardless of its use in feedback or non-feedback
531 modes. Its key setup time is excellent, and its key agility is
532 good. Rijndael's very low memory requirements make it very well
533 suited for restricted-space environments, in which it also
534 demonstrates excellent performance. Rijndael's operations are
535 among the easiest to defend against power and timing attacks.
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700536
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800537 The AES specifies three key sizes: 128, 192 and 256 bits
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700538
539 See <http://csrc.nist.gov/encryption/aes/> for more information.
540
Huang Ying54b6a1b2009-01-18 16:28:34 +1100541config CRYPTO_AES_NI_INTEL
542 tristate "AES cipher algorithms (AES-NI)"
543 depends on (X86 || UML_X86) && 64BIT
544 select CRYPTO_AES_X86_64
545 select CRYPTO_CRYPTD
546 select CRYPTO_ALGAPI
Huang Ying2cf4ac82009-03-29 15:41:20 +0800547 select CRYPTO_FPU
Huang Ying54b6a1b2009-01-18 16:28:34 +1100548 help
549 Use Intel AES-NI instructions for AES algorithm.
550
551 AES cipher algorithms (FIPS-197). AES uses the Rijndael
552 algorithm.
553
554 Rijndael appears to be consistently a very good performer in
555 both hardware and software across a wide range of computing
556 environments regardless of its use in feedback or non-feedback
557 modes. Its key setup time is excellent, and its key agility is
558 good. Rijndael's very low memory requirements make it very well
559 suited for restricted-space environments, in which it also
560 demonstrates excellent performance. Rijndael's operations are
561 among the easiest to defend against power and timing attacks.
562
563 The AES specifies three key sizes: 128, 192 and 256 bits
564
565 See <http://csrc.nist.gov/encryption/aes/> for more information.
566
Huang Ying2cf4ac82009-03-29 15:41:20 +0800567 In addition to AES cipher algorithm support, the
568 acceleration for some popular block cipher mode is supported
569 too, including ECB, CBC, CTR, LRW, PCBC, XTS.
570
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800571config CRYPTO_ANUBIS
572 tristate "Anubis cipher algorithm"
573 select CRYPTO_ALGAPI
574 help
575 Anubis cipher algorithm.
576
577 Anubis is a variable key length cipher which can use keys from
578 128 bits to 320 bits in length. It was evaluated as a entrant
579 in the NESSIE competition.
580
581 See also:
582 <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
583 <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
584
585config CRYPTO_ARC4
586 tristate "ARC4 cipher algorithm"
587 select CRYPTO_ALGAPI
588 help
589 ARC4 cipher algorithm.
590
591 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
592 bits in length. This algorithm is required for driver-based
593 WEP, but it should not be for other purposes because of the
594 weakness of the algorithm.
595
596config CRYPTO_BLOWFISH
597 tristate "Blowfish cipher algorithm"
598 select CRYPTO_ALGAPI
599 help
600 Blowfish cipher algorithm, by Bruce Schneier.
601
602 This is a variable key length cipher which can use keys from 32
603 bits to 448 bits in length. It's fast, simple and specifically
604 designed for use on "large microprocessors".
605
606 See also:
607 <http://www.schneier.com/blowfish.html>
608
609config CRYPTO_CAMELLIA
610 tristate "Camellia cipher algorithms"
611 depends on CRYPTO
612 select CRYPTO_ALGAPI
613 help
614 Camellia cipher algorithms module.
615
616 Camellia is a symmetric key block cipher developed jointly
617 at NTT and Mitsubishi Electric Corporation.
618
619 The Camellia specifies three key sizes: 128, 192 and 256 bits.
620
621 See also:
622 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
623
Linus Torvalds1da177e2005-04-16 15:20:36 -0700624config CRYPTO_CAST5
625 tristate "CAST5 (CAST-128) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000626 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700627 help
628 The CAST5 encryption algorithm (synonymous with CAST-128) is
629 described in RFC2144.
630
631config CRYPTO_CAST6
632 tristate "CAST6 (CAST-256) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000633 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700634 help
635 The CAST6 encryption algorithm (synonymous with CAST-256) is
636 described in RFC2612.
637
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800638config CRYPTO_DES
639 tristate "DES and Triple DES EDE cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000640 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700641 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800642 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700643
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800644config CRYPTO_FCRYPT
645 tristate "FCrypt cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000646 select CRYPTO_ALGAPI
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800647 select CRYPTO_BLKCIPHER
Linus Torvalds1da177e2005-04-16 15:20:36 -0700648 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800649 FCrypt algorithm used by RxRPC.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700650
651config CRYPTO_KHAZAD
652 tristate "Khazad cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000653 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700654 help
655 Khazad cipher algorithm.
656
657 Khazad was a finalist in the initial NESSIE competition. It is
658 an algorithm optimized for 64-bit processors with good performance
659 on 32-bit processors. Khazad uses an 128 bit key size.
660
661 See also:
662 <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
663
Tan Swee Heng2407d602007-11-23 19:45:00 +0800664config CRYPTO_SALSA20
665 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
666 depends on EXPERIMENTAL
667 select CRYPTO_BLKCIPHER
668 help
669 Salsa20 stream cipher algorithm.
670
671 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
672 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
673
674 The Salsa20 stream cipher algorithm is designed by Daniel J.
675 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700676
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800677config CRYPTO_SALSA20_586
678 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
679 depends on (X86 || UML_X86) && !64BIT
680 depends on EXPERIMENTAL
681 select CRYPTO_BLKCIPHER
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800682 help
683 Salsa20 stream cipher algorithm.
684
685 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
686 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
687
688 The Salsa20 stream cipher algorithm is designed by Daniel J.
689 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
690
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800691config CRYPTO_SALSA20_X86_64
692 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
693 depends on (X86 || UML_X86) && 64BIT
694 depends on EXPERIMENTAL
695 select CRYPTO_BLKCIPHER
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800696 help
697 Salsa20 stream cipher algorithm.
698
699 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
700 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
701
702 The Salsa20 stream cipher algorithm is designed by Daniel J.
703 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
704
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800705config CRYPTO_SEED
706 tristate "SEED cipher algorithm"
707 select CRYPTO_ALGAPI
708 help
709 SEED cipher algorithm (RFC4269).
710
711 SEED is a 128-bit symmetric key block cipher that has been
712 developed by KISA (Korea Information Security Agency) as a
713 national standard encryption algorithm of the Republic of Korea.
714 It is a 16 round block cipher with the key size of 128 bit.
715
716 See also:
717 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
718
719config CRYPTO_SERPENT
720 tristate "Serpent cipher algorithm"
721 select CRYPTO_ALGAPI
722 help
723 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
724
725 Keys are allowed to be from 0 to 256 bits in length, in steps
726 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
727 variant of Serpent for compatibility with old kerneli.org code.
728
729 See also:
730 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
731
732config CRYPTO_TEA
733 tristate "TEA, XTEA and XETA cipher algorithms"
734 select CRYPTO_ALGAPI
735 help
736 TEA cipher algorithm.
737
738 Tiny Encryption Algorithm is a simple cipher that uses
739 many rounds for security. It is very fast and uses
740 little memory.
741
742 Xtendend Tiny Encryption Algorithm is a modification to
743 the TEA algorithm to address a potential key weakness
744 in the TEA algorithm.
745
746 Xtendend Encryption Tiny Algorithm is a mis-implementation
747 of the XTEA algorithm for compatibility purposes.
748
749config CRYPTO_TWOFISH
750 tristate "Twofish cipher algorithm"
751 select CRYPTO_ALGAPI
752 select CRYPTO_TWOFISH_COMMON
753 help
754 Twofish cipher algorithm.
755
756 Twofish was submitted as an AES (Advanced Encryption Standard)
757 candidate cipher by researchers at CounterPane Systems. It is a
758 16 round block cipher supporting key sizes of 128, 192, and 256
759 bits.
760
761 See also:
762 <http://www.schneier.com/twofish.html>
763
764config CRYPTO_TWOFISH_COMMON
765 tristate
766 help
767 Common parts of the Twofish cipher algorithm shared by the
768 generic c and the assembler implementations.
769
770config CRYPTO_TWOFISH_586
771 tristate "Twofish cipher algorithms (i586)"
772 depends on (X86 || UML_X86) && !64BIT
773 select CRYPTO_ALGAPI
774 select CRYPTO_TWOFISH_COMMON
775 help
776 Twofish cipher algorithm.
777
778 Twofish was submitted as an AES (Advanced Encryption Standard)
779 candidate cipher by researchers at CounterPane Systems. It is a
780 16 round block cipher supporting key sizes of 128, 192, and 256
781 bits.
782
783 See also:
784 <http://www.schneier.com/twofish.html>
785
786config CRYPTO_TWOFISH_X86_64
787 tristate "Twofish cipher algorithm (x86_64)"
788 depends on (X86 || UML_X86) && 64BIT
789 select CRYPTO_ALGAPI
790 select CRYPTO_TWOFISH_COMMON
791 help
792 Twofish cipher algorithm (x86_64).
793
794 Twofish was submitted as an AES (Advanced Encryption Standard)
795 candidate cipher by researchers at CounterPane Systems. It is a
796 16 round block cipher supporting key sizes of 128, 192, and 256
797 bits.
798
799 See also:
800 <http://www.schneier.com/twofish.html>
801
802comment "Compression"
803
Linus Torvalds1da177e2005-04-16 15:20:36 -0700804config CRYPTO_DEFLATE
805 tristate "Deflate compression algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000806 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700807 select ZLIB_INFLATE
808 select ZLIB_DEFLATE
809 help
810 This is the Deflate algorithm (RFC1951), specified for use in
811 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800812
Linus Torvalds1da177e2005-04-16 15:20:36 -0700813 You will most probably want this if using IPSec.
814
Geert Uytterhoevenbf68e652009-03-04 15:15:49 +0800815config CRYPTO_ZLIB
816 tristate "Zlib compression algorithm"
817 select CRYPTO_PCOMP
818 select ZLIB_INFLATE
819 select ZLIB_DEFLATE
820 select NLATTR
821 help
822 This is the zlib algorithm.
823
Zoltan Sogor0b77abb2007-12-07 16:53:23 +0800824config CRYPTO_LZO
825 tristate "LZO compression algorithm"
826 select CRYPTO_ALGAPI
827 select LZO_COMPRESS
828 select LZO_DECOMPRESS
829 help
830 This is the LZO algorithm.
831
Neil Horman17f0f4a2008-08-14 22:15:52 +1000832comment "Random Number Generation"
833
834config CRYPTO_ANSI_CPRNG
835 tristate "Pseudo Random Number Generation for Cryptographic modules"
Neil Horman4e4ed832009-08-20 17:54:16 +1000836 default m
Neil Horman17f0f4a2008-08-14 22:15:52 +1000837 select CRYPTO_AES
838 select CRYPTO_RNG
Neil Horman17f0f4a2008-08-14 22:15:52 +1000839 help
840 This option enables the generic pseudo random number generator
841 for cryptographic modules. Uses the Algorithm specified in
Jiri Kosina7dd607e2010-01-27 01:00:10 +0100842 ANSI X9.31 A.2.4. Note that this option must be enabled if
843 CRYPTO_FIPS is selected
Neil Horman17f0f4a2008-08-14 22:15:52 +1000844
Linus Torvalds1da177e2005-04-16 15:20:36 -0700845source "drivers/crypto/Kconfig"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700846
Herbert Xucce9e062006-08-21 21:08:13 +1000847endif # if CRYPTO